sc-estimate
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes arbitrary task descriptions provided by the user, which serves as an ingestion point for untrusted data.\n
- Ingestion points: The input string for task or feature descriptions provided to the
/sc:estimatecommand inSKILL.md.\n - Boundary markers: The skill does not employ specific delimiters or instructions to prevent the agent from following prompts potentially hidden within these descriptions.\n
- Capability inventory: The skill coordinates with high-capability tools including
Bashfor command execution,Read/Grep/Globfor file access,TodoWritefor writing to the filesystem, andTaskfor delegation.\n - Sanitization: There are no explicit instructions for sanitizing, validating, or escaping the user-provided data before it is processed by the agent.
Audit Metadata